Re: Connecting a remote workstation to a domain

Can you log onto the laptop using her domain credentials, then create a new
VPN for "All Users" to the SBS server (and using her domain credentials).
Then log off and log back on again with her domain credentials and the "Log
on using"...?

--
Merv Porter [SBS-MVP]
============================

"MF" <MF@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:CF7F3E76-D806-4706-B236-39954BB28FAD@xxxxxxxxxxxxxxxx
I have done this all day. I actually went to the office to log onto the
server with her credentials to cache her profile. Before and after, I have
created the VPN connection and tested with the same results from a remote
location. Still no dice.
(I'm pulling my hair now).



"Merv Porter [SBS-MVP]" wrote:

Log onto the laptop with her domain credentials without using the VPN at
login, then log out and try the "log on using dialup connnection".

--
Merv Porter [SBS-MVP]
============================

"MF" <MF@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:E3AC9D0D-DC86-4B68-AE81-3AF33D4EBAB1@xxxxxxxxxxxxxxxx
Yes, she is logging on with her domain credentials and she has mobile
user
template applied to her profile. She has been using VPN for over a year
now
but not in this manner. Her laptop had been corrupt so it had to be
re-installed. Now I am facing this issue as she needs to leave tomorrow
morning. I am not sure what else I am missing or leaving out. This is a
desperate situation now as every second counts.

Thanx.


"Merv Porter [SBS-MVP]" wrote:

Is she logging in with credentials that are the same as her domain
user
account and does her domain user account have "Mobile user"
permissions
(so
she is granted VPN rights to the SBS server)?

I really think her "end user experience" is going to be poor with just
a
VPN
connection directly to the SBS network, espercially for file access or
printing. That's a lot of data to be sending over the wires. As
Frank
said, RWW would be far better. Even setting up a low end workstation
in
the
office for her for RDP access via RWW should be better than a VPN and
worth
the extra $$ (wouldn't even need a dedicated monitor for it).

--
Merv Porter [SBS-MVP]
============================

"MF" <MF@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:35C59DB6-9492-47ED-8D0C-EDF0EEE5F786@xxxxxxxxxxxxxxxx
I selected the "All Users" option and I have added her to the local
admin
on
the laptop. I have also selected not to dial an initial connection
before
connecting to the VPN (I had selected the other option before, in
any
case,
neither has made a diference). No, she does not have another
computer
at
the
office.

I'm not sure what else could make the VPN not work at log on but
instead
bring up dial in modem settings page.

Thanx.



"Merv Porter [SBS-MVP]" wrote:

I suspect the VPN connection has been set for "My Use Only" and not
"All
Users" or the user does not have local administrator permissions on
the
woremote workstation.

I assume the CEO does not have a workstation available at the main
office,
right?


--
Merv Porter [SBS-MVP]
============================


"MF" <MF@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:E7526C77-FC60-47FA-A56B-E3BB26C42C4D@xxxxxxxxxxxxxxxx
Hello All,

I am trying to add and connect remote Windows XP computers to the
SBS
2003
Premium server domain at the main office. And I need the users
to
be
able
to
push CTRL+ALT+DELETE, enter their logon credentials, check the
"use
dialup
connection" checkbox, and log onto the domain while the VPN does
the
backend
connection.

I have set things up with the following details (up to number 12)
but
at
log
on the dial up modem shows up (instead of the details on number
13+);

1. Login as administrator on the workstation and create a
VPN-connection
to the SBS-server. Make sure you enable this connection for 'All
users'.
After the setup has finished, go to the Properties of this
connection
and
check the 'include Windows login domain' in the tab Options.
2. Connect to the SBS-server with that VPN-connection using the
administrator's credentials.
3. Right click My Computer, Properties, Network Identification.
4. Enable 'Domain' and fill in the name of the SBS-domain (on
XP
you
might need to add the .local suffix, so company.local).
5. Fill in the login name and password of an account that is
allowed
to
join a workstation to the domain.
6. After a while you will get the 'Welcome to domain' message
and
the
remark that you will have to reboot the workstation. Make sure
you
don't
reboot yet!
7. OK out of the Network Identification and don't reboot before
you
have
added the domain user to the local Administrators Group of the
workstation.
8. Go to Control Panel, Users and Groups, and click Add.
9. Fill in the name of the user and the domain name or use
Browse
and
make sure you choose the SBS-domain from the drop down box, than
select
the
domain user.
10. Make sure that the added user is given the 'Administrator'
right
on
the workstation.
11. OK out of it and reboot.
12. After reboot, fill in the name of the domain user, password
and
make
sure the SBS-domain is selected in the domain field. Check the
'use
dialup
connection'-box.
13. After OK, choose the VPN-connection to connect to the SBS.
When
authorized into the SBS-domain, the login script will run.
14. After the login script has finished and if you have Premium,
you
will
see the 'Install Firewall Client'-icon on the desktop.
Double-click
it
and
let it install.
15. The login script will also have added the 'Remote E-mail
access'
and
'Remote Server Access'. It will have set the homepage in the
IE-settings
to
the Companyweb.
16. You can modify these favorites to make them available for
the
remote
user. In Documents and Settings\Favorites right click the link
and
choose
Properties. Modify the link to 'http://servername/exchange' to
the
proper
link needed for accessing OWA from the internet. Example:
https://FQDN/exchange or https://IP/exchange and
https://FQDN/remote
or
https://IP/remote.
17. If Premium, go to the LAN-settings of IE and uncheck the
'use
proxy'.
Disable the Firewall client by right clicking the Firewall Client
icon
in
the
system tray (as the Firewall client will prevent the user to
access
the
Internet when not connected to the SBS).
18. Disconnect the VPN-connection and reboot as the domain user
without
dialing up to the SBS-domain. Check all links and check the
default
Internet
access. Check the vpn-connection.

...and
http://i.i.com.com/cnwk.1d/i/tr/downloads/home/client_side_VPN.pdf


Any ideas how I can resolve this problem ASAP? The CEO is leaving
in
the
morning on a flight and needs this ready by the end of today.

Thanx.

J












.

Relevant Pages

  • Re: Some Questions
    ... you may need to follow the steps below to configure VPN access ... And make sure you have typed the public FQDN of the SBS ... server on the Web Server Certificate page. ... log in and download Connection Manager. ...
    (microsoft.public.windows.server.sbs)
  • RE: VPN Connectivity issues through LAN
    ... I understand that you cannot ping SBS after ... you can establish VPN connection from the remote LAN. ... You have to rerun the CEICW to make sure your SBS 2003 server have right ...
    (microsoft.public.windows.server.sbs)
  • RE: VPN
    ... Thank you for posting in SBS newsgroup. ... establish the VPN connection to the SBS server by using the 'Connection ... The error code indicated "Unable to establish the VPN connection. ...
    (microsoft.public.windows.server.sbs)
  • RE: Remote Access Routing Questions
    ... When we setup VPN connection to some network from internet, ... When we VPN to the SBS network, we surely can access the Companyweb site by ...
    (microsoft.public.windows.server.sbs)
  • RE: Connect Computer and VPN
    ... these things compromise any of the security, or is this ment to be on SBS? ... I will start a new post regarding the VPN as this still fails to work. ... Directory and uncheck "Enforce Strict RPC Compliance". ... please test the VPN connection. ...
    (microsoft.public.windows.server.sbs)